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An apparatus for defecting and reconflng monetary transactions. 



© Apparatus for effecting and recording monetary transac- 
tions including, apparatus for registering the present value of 
money therein, appar at us for setectabfy adjusting the regis- 
tered value to indicate a payment and receipt transaction, and 
identity verification apparatus including asymmetric cryptc- 
Qrapriic apparatus coupled to trie apparatus for adjusting tor 
act i v ati on thereof. The apparatus as a whole is provided as 
an electronic wallet (10) comprising a display (12), a key- 
board (14) and a connecting jack (16). 
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AW APPARATUS FOR EFFECTING AND RECORDING MONETARY TRANSACTIONS 



The present invention relates to an apparatus for effec- 
ting and recording monetary transactions. 

Conventional waltets in which one carries cash money 
have tong been known. One can open the wallet and 
extract an amount which does not exceed the present value 
therein, in order to make a payment or one can receive 
payment from another party and deposit the received 
amount in the wallet, to increase the value therein accord- 
ingly. 

Many methods exist for rerruvtng the trtconvenience 
and risks of carrying cash in one's wafiet These include 
personal checks, traveler's checks, vouchers and credit 
cards, just to name a few. In addition, in order to eliminate 
the need for proximity during the transaction, methods have 
been developed for making payments from afar, such as 
using the mail system, telegraphing money orders and elec- 
tronic fund transfer systems. 

These systems suffer from a number of olsaoVamages. 
There is no easy way to verify thai a payment received is 
not forged or that it is backed by proper credit (particularly 
in the case of checks and credit cards). Payments received 
cannot easily increase the current value or fund which is 
avaSabts tor making payments. Electronic fund transfer sys- 
tems are not suitable, in their present form, for use by an 
individual mating an everyday payment 

There exist a number of so-called French Smart Cards 
distributed by a number of French companies which enable 
one to make payments but not to receive them. They are 
stmHar to ordinary automatic credit cards or banking cards, 
such as BANKOMAT in Europe, but the identification pro- 
cedure seems to be more re&aUe since it may involve some 
cryptographic computations and not merely reading a mag- 
netic tape. The details of their operation have not been 
published. 

Davies' Signature Token described by D.W. Davies in 
"Use of the 'Signature Token' to Create a Negotiable 
Document", presented in Crypto 83, Santa Barbara CA, 
U.S-A^ August 1983 claims to enable the prevention of 
forgeries, but is unabte to 'register the balance of the value 
available. 

U.S. Patent 4,320387 to PoweO discloses apparatus 
for providing secured comrnunication of information com pris- 
ing individual units including display of information to be 
communicated, electronic circuit means providing automatic 
security of transmission between relatively remote units that 
are intended to be included in a specific transfer of informa- 
tion, electronic mf ont ia iiuii storage means for recording of 
oamrrunicated i nfu/m atkxv and racSant energy signal trans- 
mitting devices for enacting coupling of any two selected 
apparatus units that are to participate in the information 
transfer. Time-base controlled signal encoding is utilized to 
effect generation of the ccmmurtication to the two selected 
units and to provide security of transmission. This electronic 
circuitry induces a time-control base which is functional to 
change its control function m the same amount of time as 
that which would be required to complete one transaction in 
the recording phase of operation. 

In operation, a coded signal cch responding to the in- 
formation to be transferred is transmitted by one apparatus 
and received by the second. The receiving apparatus uti- 
lizes the same time-3>ritroJ base encoding to encode the 
data it expects to receive (Le.. as manually input by the 
owner). It than compares the received encoded data with 
the encoded expected data if identical, the transaction 



proceeds. Since the encoder signal changes over time, 
certain fraudulent transactions are prevented since the re- 
ceived encoded data wSl not accord with the encoded 
expected data. 

5 This apparatus suffers from a number of disadvan- 

tages. First, it is possible to bypass a portion of the iden- 
tification system of each apparatus unit thereby lowering the 
security of the system. Second, and more importantly, 
knowledge of the time-control base function gained from 

10 any one apparatus unit permits one to engage in many 
fraudulent transactions, threatening the entire monetary sys- 
tem with conapse. Third, coded identification for aO the other 
units are included in the memory of each unit, requiring a 
large memory capacity. 

15 A p referre d embodiment of the present invention may 

provide an electronic wallet which permits both payment 
and receipt of money, which includes an automatic iden- 
tification system which prevents forgeries and which cannot 
be bypassed. 

20 According to one aspect of the present invention there 

is provided an apparatus for effecting and recording mone- 
tary transactions comprising: means for registering the 
present value of money therein, means for setecteWy ad- 
justing the registered value to setectabry indicate payment 

25 and receipt responsive to a manual control input and 
identity verification means coupled to the means for adjust- 
ing for activation thereof. 

According to a preferred erruxa dl men l of the invention, 
the means for selectabJy adjusting includes means for deter- 

30 mining whether tie tjartsaction is permitted, and means tor 
effecting transfer of value coupled to the means for register- 
ing present value. 

Further according to a preferred embodiment, the 
means for kSsntrty verification includes cryptopjaphic means 

35 which may include secret key encoder means arranged to 
encode data transmitted by the apparatus, and known key 
decoder means arranged to decode encoded data received 
by the apparatus. 

Further in accordance with a preferred embodiment, 

40 the apparatus further includes cryptographic owner iden- 
tification means. 

Additionally ft accordance with a preferred embodi- 
ment the apparatus further comprises means tor destroying 
the registered information which is activated by uriauthoriz- 

4S ed physicaJ entry. 

There is further provided means for institutional valida- 
tion of the apparatus. 

According to another aspect of me present invention 
there is provided apparatus for effecting and recording 

SO monetary transactions including: means for registering the 
present monetary value of the apparatus; means operative 
in response to a first manual control input for tdantrfying a 
permitted user, means operative in response to a second 
manual control input for registering the monetary vafua of a 

55 transaction; means for transmrttirtg an encoded output signal 
corresponding to Identification of the apparatus; means for 
receiving an encoded input signal corresponding to iden- 
tification of an apparatus with which the transaction is to be 
effected; means for decoding and verifying the encoded 

GO received signal; means for transmitting an output signal 
corresponding to the monetary value of the transaction to 
the apparatus with which the transaction is to be effected; 
means for receiving an input signal corresponding to the 
monetary value of the transaction from the apparatus with 

65 which the transaction is to be effected; means for cetemtbv 
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ing whether the transaction cs permitted; means for transmit- 
ting an encoded output signal corresponding to the mone- 
tary value and direction of the transfer in the transaction to 
the apparatus with which the transaction is to be effected: 
means tor receiving an encoded input signal corresponding 
to the monetary value and direction of the transfer in the 
transaction from the apparatus with which the transaction is 
to be effected; means for decoding and verifying the re- 
ceived signal; and means for adjusting the registered 
present value in accordance with the transfer effected by 
the transaction. 

An apparatus of the present invention wfll be further 
understood end appreciated from the fotowing detailed de- 
scription taken in conjunction with the drawings in which: 

Fig. 1 is an lustration of an electronic waBet con- 
structed and operative in accordance with an embodbnern 
of the present invention; and 

Tig. 2 is a block diagram illustration of the electronic 
circuitry employed in the electronic weftet of Figure 1. 

With reference to Fig. 1 there is shown an electronic 
waftet generally designated 10 constructed and operative in 
accordance with an embodiment of the present invention. 
The wallet may have the general appearance of a small 
pocket calculator, and comprises a display 12 of any con- 
ventional design, a keyboard 14 and a connecting jack or 
other coupling device 16. 

Referring now to Fig. 2 there is shown in block dia- 
gram form the electronic circuitry employed in the electronic 
waSei of Figure l. The circuitry includes a CPU 20 such as 
a microprocessor, including input/output interface and a 
ROM, for example model 8041A of Intel Corp., USA, a 
RAM 22. such as a 64K RAM, model number 2164 and 
associated controller 24, such as model 6203, both of Intel 
Corp., and an E=PROM 26, such as an E 2 PR0M. 2K x 8, 
model 2817 of Intel Corp., aD coupled by bus 28, The 
wallet is powered as by batteries (not shown). RAM 22 
serves to register the present value of the wallet along with 
the various transactions in which it has participated, as will 
be explained in detail hereinbetow. Microprocessor 20 is 
operative to adjust the present value registered in E^PROM 
26 at any given time in accordance with a pre-programmed 
protocol. 

A keyboard 30, which may comprise any conventional 
keyboard, preferably an atphanurriencai keyboard, is coup- 
led to microprocessor 20 for input of transaction data and 
personal identi fica ti on codes. A display 34, which may 
comprise any conventional means for providing a visual 
display, is also coupled to microprocessor 20 for providing a 
visibte output indication of the transaction data There is 
also provided connecting means 38, such as a connecting 
jack or any other conventional means for coupling two 
electronic wallets for information transfer therebetween. 

The electronic wallet also contains a real time clock 
40, such as a Tune of Day (T.O.O.) Clock, number 
WD2412. manufactured by Western Digital Corp.. USA, 
which acts to record the time at which each transaction of 
the wa8et occurs (30 bits are sufficient to represent time 
with resolution of seconds over a period of 30 years). The 
provision of a real time clock permits transactions between 
any wallets having compatible hardware and curnpatfrte 
transaction protocol while preventing such fraudulent trans- 
actions as improper repetition of a transfer. 



In addition, the wallet preferably contains a fist of 
cancelled wallets to prevent receipt of payments from wal* 
lets which have been found to be fraudulent or were re- 
ported stolen or lost Such a 1st could be supplied to the 
5 wallet during validation. By issuing new series ol identifica- 
tion numbers to the wallets periodically, this list can be kept 
short 

Preferably the waflet includes an audit traB, a Est of all 
transactions of me wallet since the last validation, including 

10 aD proofs of payments made to the waftet and receipts ol ait 
payments made by the wallet The audit trail is retained in 
the RAM of the wallet until the next validation, at which 
time, the audit trail is translerred to the memory of the 
institution where validation occurs, and erased from the 

75 waftet In addition to providing a record of transactions of 
me wallet the audit trail also allows computation of the 
balance of a user who has lost his wallet, by tracing his 
credits and debits in the audit trails of the wallets with which 
the transactions occurred. 

20 The wallet is also provided with user identification 

apparatus, which may comprise any conventional cryp- 
tographic system, to prevent unauthorized access to the 
wallet or tampering therewith. Thus, the owner of a wallet 
wffl have, tor example, a password which is entered via the 

25 keyboard to the wallet to identify him at the start of a 
transaction. 

The wallet also comprises, at any given time, an unfor- 
geable "present value". For purposes of this application, 
urrtorgeabte is defined as cryptcgrarjhically signed in such a 

JO way as to force one to crack the cipher in order to forge a 
message. The value of the wallet is registered in the 
memory ol the waflet and any increase or decrease due to 
receipt or payment of money is carried out and registered in 
accordance with a certain protocol, the new value being 

35 regis tat ed as the current present value. A conventional 
oyptosyetam, such as the Data Encryption Standard. "DES 
Modes of Operation*. FIPS PUB 81, Federal Information 
Processing Standards Publication, Dec 2. 1980, may be 
util ized for encoding and decoding of information transferred 

40 from one waflet to the other. 

In order to provide unforgeabJe present values and 
receipts, an asymmetric or public key encoding system is 
preferably employed for identity verification throughout the 
transaction. This means that a secret key, hard wired into 

45 the apparatus and known to no-one, is used to encode the 
data to be transferred to the other apparatus which is a 
party to the transaction. Similarly, data received from the 
other apparatus wffl be received encoded by the secret key 
of the other apparatus. A public key, or known decoder 

so means, is provided to each apparatus to permit it to decode 
the data receh/ed by it before proceeding with the next step 
of the transaction. Thus, white any apparatus is capable of 
decoding the data received by it only the legitimate wallet 
can encode data it transmits with its own secret key. This 

55 means that forgery is possible only by cracking the cipher 
using the public key. 

A particularly suitable public key cryptosystem has 
been proposed by Rivest Shamir and Adetman in "A 
Method for Obtaining Digital Signatures and Public Key 

60 CryptosystBms". Comm. ACM, Vd 21. February 1978, pp. 
120-126, to be utilized for imernaJ encoding of data to be 
transferred between wallets. Artemativefy, any other public* 
key signature cryptographic system win suffice, such as that 
described by Rabin, M.O. in "Digitalized Signatures and 

65 Pubfc-Key Functions as Intractable as Factorization" . 
MrTA.CS/TH-212, January 1979. 



3 



5 



0172 670 



6 



The various keys and passwords utilized by the owner 
(or user identrficatiQrw by the waitei (or decoding and by trie 
validating institution, vrf) be found in the memory of the 
wallet It wiD be appreciated that the preferred user iden- 
tification end identity verification means are also suitable for 
identification from alar, such as through a telephone fine or 
other means of commuTtication. 

It is a particular feature of the present embodiment that 
only the public keys of the banks or validating institutions 
and the public key of the owner signed by the bank need 
be* retained in the memory of the wallet to permit transac- 
tions with aO other wallets. Thus, a much smaller memory is 
required than in existing devices. 

The particular advantage of using a public key cryp- 
tosystem is that even if someone should manage to break 
the cipher in one wallet to forge transactions therein, he win 
be unable to subvert the entire banking system. Further- 
more, H the waQet is forged, it wO) be detectable by means 
of the audit trails discussed above. 



Preferably the wallet also includes means for destroy- 
ing the information stored therein which is activated in the 
event that an attempt is made to penetrate the wallet 
physically or through some signals other than the legitimate 

s signals used in the user identification means or in the 
protocols. For example, the wallet may be constructed in 
such a manner that opening it will short circuit the batteries, 
or destroy the microprocessor, or that x-rays or other at- 
tempts to read the encoded information wiD serve to destroy 

to the cooing. This serves to further prevent compromise of 
the whole monetary system by unauthorized entry into a 
wallet 

The wallet is validated through a renewal protocol with 
an authorized institution, such as a bank. The complemen- 
ts tary device owned by the i ns tit ution would read the audit 
traQ of the waDet since its latest validation, erasing it from 
the wallet insert the new value and supply additional tn- 
forrnatrjn which may be useful. A flow chart of a suitable 
renewal protocol is given in the following chart 
20 RENEWAL PROTOCOL 



Wallet Authority 
(Identification) > 

< (Identification) 

(Audit trail) : > 

< (signed new keys) 

< (list of invalid wallets) 



where (DATA) — > indicates the transfer of data in the 
direction indicated by the arrow. 

Transfers of money are effected by means of a trans- 
action protocol Operation of the wallet in general terms, is 
as follows. For exampta. suppose i and j have agreed on a 
payment of v dollars by i to j. Each must first identify 
himself to his wallet by entering his password on the key- 
board. Each enters the value v into his waQet and indicates 
whether H should be paid or received. Thus, a transaction 
may take place only if Doth parties agree to rt 

The wallets are now coupled to one another via con- 
necting means which may be a connecting jack or a tele- 
phone modem or any other means of coupling the wallets 
tor transmitting and receiving of information from one an- 
other. The transfer of value from fs wallet to fs is carried 
out through a proper transaction protocol It wiD be appre- 
ciated that such a transfer is only permitted if i s waUel has 
the necessary value, ie., if the value of the paying wallet is 



40 



greater than or equal to the sum to be paid. The result of 
45 the transaction is that the value in fs wallet has been 
reduced by v while the value in j*s wallet has increased by 
v, the sum of the values of the wallets not being changed 
by the transaction. 

An untonjeable receipt or cryp tog r aphicaify signed 
50 proof of having paid the amount of the transaction, is 
provided to fs wallet in the form of data encoded by fs 
secret code, and registered therein. At the same time, an 
imtcrgeaKe proof of receipt of payment is registered in j's 
, wallet in the form of data encoded by i*s secret code. 
55 These proofs of payment and receipts ere added to the 
wallet's audit trail 

A flow chart of an example of a suitable tr ans acti on 
protocol including a public key cryptosystern is as follows 
TRANSACTION PROTOCOL 

60 
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j/allet of 
~>(i Password; Pay vi) 
Is Vi < vi? 



Wallet of j 
— >(j Password; Receive vj) 



If yes, (EM) 

If no, Dx(ei,i) 



> 
> 



(ei,i):= Ex(Dx(ei,i)) 
(vj, t, Dx(ej,j) 



Is vi = vj and is t reasonable? 

If no, (EM) > 

If yes, (ej,j):= Ex(Dx(ej,j)) 

<■ 

Di (vi,t,j) > 

(v",t w ,i"):=Ej(Dj(vj,t,j)) 
If (v%t»,i») = (vj,t,i), 
then Vi:= Vi - vi 



-Dj (-vj,t,i) 



(V ,t' ,j l ):=Ei(Di(vi,t, j)) 
If <V,t\j') = (vi,t,j) t 
then Vj: = Vj + vj 



where: Vy ° present value of wallet of y; vy ° value in 
transaction involving wallet y; t ° real time; (DATA) — > « 
transfer of data in the direction of the arrow; and (EM)— > 
- transmission of an Error Message, terminating the pro- 
tocol. 

Operation of the transaction protocol is as follows, with 
reference to the transaction protocol flow chart and with 
further reference to the transfer of the value v from i to j. 
Assuming a public* key cryptosystem is used, the pub&c-fcey 
of user i is a pair of operators (5, Di) each of which is 
operative to cancel the operation of the other, i.e~, for every 
word W. B{Di(W)J » W. Operators E and Di serve to 
encode and decode data being tran&itiusd to and from 
wallet L in order to operate B, one must use the public-key 
ei, and in order to operate Di, one must use the secrei-key 
OX The krowtedge of ei does not help to determine di. Even 
the owner of a wallet does not know the secret-key. di. 
stored therein. 

The present contents of user j*s waflel include ex (the 
pubfic key of the bank or other renewing institution) and d] 
G's secret key), as well as Dxfejj) (f s public key certified by 
the bank and indicating that this is a valid wallet), t repre- 
sents real time as measured by the real time clock. 



*o After i and j identity themselves to their wallets by 

inserting their respective passwords, and have inserted the 
value of the present transaction, the wallets are coupled to 
one another to establish communication, Le. direct coupling 
or via a telephone. It wiD be appreciated that coupling of the 

45 wallets may alternatively be effected before user identifica- 
tion. 

The value of the desired transaction vi is compared 
with the current present value Vi of i's waDat to determine 
whether the transaction is permitted. M vi is greater than Vi, 

50 gn error message is sent, thereby terminating the protocol 
If vi is lass than or equal to Vi. then Ps public key 
certified by the bank, namely i's public key and identity (ei.i) 
encoded by operation thereon of the bank's public key 
(operator Dx) is transmitted to i's wallet In j's wallet, this 

55 data is decoded by the opw a ti on of the public key of the 
bank (Ex). 

Upon receipt of this data, the value j punched into his 
wallet as being the amount of the transaction (vj), the real 
time (t), and fs public key certified by the bank, namely i's 

50 pubGc key and identity (ejj) encoded by uu eid tiu n thereon 
of the bank's secret key (operator Dx) are all transmitted to 
i's waftet In rs waHei j's public key is decoded by the 
operation of the public key of the bank (Ex). 

WaUet i now compares vi and vj to verify thai the value 

55 of the transaction is equal It also compares t received from 
wallet j with the real time at which it transmitted its identify- 
ing transmission to be sure that no more than a predetsr- 
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mined limited amount of time has passed since initiation of 
the transaction. If either vi *vj or there is a mismatch of real 
time t (e.g., tr*tj + const), an error message is sent, 
terminating the protocol. 

If vi e vj and t is reasonable, transfer of the value of 
the transaction is effected J sends a receipt to i which 
includes the value paid by i (-vj), the real time, and the 
identity of i. all encoded by Dj i)$ secret code known on)/ 
to his wallet). Since Dj is secret even to j, this receipt is 
unforgeabte unless the cipher is broken, Similarly, i sends a 
receipt to j which induces ths value received by j (vi), the 
real time, and the identity of j, aQ encoded by Di fi's secret 
code known only to his wallet). Since Di is secret even to i. 
this receipt is unforgeabte unless the cipher is broken, t 
prevents illegal duplication of the transaction. 

In order to insure that the receipts correspond to the 
expected values and time of the transaction, each of wallets 
i end j decode the receipt using the public code of the other 
(B and ED end compare the decoded data with the ex- 
pected values of v. t and L If they are identical, the new 
present value of wallet i, Vi, which equals former Vi - vi, is 
registered in the memory of wallet i, and the new present 
value of wallet j, Vj, which equals former Vj + vj, is 
registered in the memory of wallet j. To avoid cutting 
communication before the last transmission. La. when only 
one receipt has been sent, secret exchange methods can 
be used, such aa those eat forth in Blum, M., "How to 
Exchange Secret Keys*, Proceedings of the tSth Annual 
ACM Symposium on Theory of Computing, and Even, S. 
Grtdreich, O. and Lempet. A. "A Randomized Protocol for 
Signing Contracts", Proceedings of Crypto 82. July 1983, 
between the last two communications. 

It wis be appreciated that whBa each wallet preferably 
has its own self^ontatned power source, the value of the 
wallet is stored in a non-voiatits memory, so that if the 
battery is inoperative, a transaction may not tato place, but 
the owner of the waflet will not lose his money. 

The wallets are protected against toss of money in 
case of toss of the waDet or misuse by someone other than 
the owner, since one must know the password in order to 
operate the wallet They are protected against fraudulent 
transactions, as by eavesdropping on telephone tines and 
citiemplii t y to dupncate the transaction, by real time t which 
must be reasonabte in order for the apparatus to carry out 
the transaction. Sirrdtarty, they are protected against forging 
a transaction over ths telephone tines since a signed or 
encoded receipt is required to conclude the transaction. 
And they are protected against the ccupfing of two legiti- 
mate wallets via improper hardware. 

ft wifl be approbated by those skrSed in the art that the 
invention is not limited to what has been shown and de- 
scribed hereinabove merefy by way of example. Rather, the 
scope of the invention is limited solely by the claims which 
follow. 

Claims 



1. Apparatus for effecting and recording monetary transac- 
tions comprising: means for registering the present value ot 
money therein; means for seiectabry adjusting the registered 
value to seiectabry indicate payment and receipt responsive 
to a manual control input and identity verification means 
coupled to the means (or adjusting for activation thereof. 

2. Apparatus according to claim i and wherein said means 
for setectably adjusting comprises: means for determining 
whether the transaction is permitted; and means for effec- 



ting transfer of value coupled to the means for registering 
present value. 

3. Apparatus according to claim 2 and wherein said means 
5 tor effecting transfer comprises secret key encoder means 
arranged to encode data to be transmitted by the apparatus, 
and known key decoder means ar r ange d to decode en- 
coded data received by the apparatus. 

w 4. Apparatus according to any preceding claim and further 
comprising cryptographic owner identification means. 

5. Apparatus according to claim 2, or claim 3 or 4 when 
appended thereto and wherein said means for determining 

is includes means for comparing the value of the transaction 
with the registered present value. 

6. Apparatus according to claim 2, or daim 3, 4 or 5 when 
appended thereto, and whererin said means for Determining 

20 includes means for determining whether the real time of the 
transaction tails within a predetermined ranga 

7. Apparatus according to any preceding daim and wherein 
said identity verification means comprises a public Key 

25 crvotosystam. 

8. Apparatus according to any preceding claim and further 
comprising means for destroying the registered information 
activated by physical tampering with the apparatus. 

30 

9. Apparatus according to any preceding daim and further 
c omprisin g means for institutional validation of the appara- 
tus. 

35 10. Apparatus for effecting and recording monetary transac- 
tions comprising: means for registering the present mone- 
tary value of the apparatus: means operative in response to 
a first manual control input for identifying a permitted user 
means operative tn response to a second manual control 

40 input for registering the monetary value of a transaction; 
means for transmitting an encoded output signal corre- 
sponding to ideiiununjon of the apparatus: means for re- 
ceiving an encoded input signal correspo nd ing to identifica- 
tion of an apparatus with which the transaction is to be 

45 effected; means for decoding and verifying the encoded 
received signal; means for transmitting an output signal 
corre sp o n ding to the monetary value of the transaction to 
the apparatus wfth which the transaction is to be effected; 
means tor receiving an input signal corresponding to the 

50 monetary value of the transaction from the apparatus with 
which the transaction is to be effected; means for determin- 
ing whether the transaction is pe r mitted; means for transmit- 
ting an encoded output signal corresponding to the mone- 
tary value and direction of the transfer in the transaction to 

55 the apparatus with which the transaction is to be effected; 
means for receiving an encoded input signal ^responding 
to the monetary value and direction ot the transfer in the 
transaction from the apparatus with which the transaction is 
to be effected; means for decoding and verifying the n> 

so ceived signal; and means tor adjusting the registered 
present value in accordance with the transfer effected by 
the transaction. 

it. Apparatus according to daim 10 and wherein each of 
65 said means for transmitting comprises secret encoder 
means for encoding said output signals. 

12. Apparatus according to daim 10 or 11 and wherein 
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each of said means tor receiving comprises known decoder 
means for decoding said input signals. 

13. Apparatus according to daim 10. 11 or 12, and wherein 

said means tor determining includes means for comparing 5 
the value of the transaction with the registered present 
value. 

14. Apparatus according to daim 10, 11, 12 or 13. and 
wherein said means for determmtng includes a real time *o 
clock and means coupled to said real time dock and to said 
means for receiving for determining whether the real time of 

the transaction faOs within a predetermined range. 

15. Apparatus according to any one of claim 1 to 9, is 
wherein said identity verification means includes crypto- 
graphic means. 

16. Apparatus according to claim 15, wherein said cryp- 
tographic means is an asymmetric cryptographic means. 20 

17. Apparatus according to any preceding claim, which has 
the general size, shape and portability of a pocket calcula- 
tor. 
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